Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-29491HistoryApr 14, 2023 - 1:15 a.m.
CVE-2023-29491
2023-04-1401:15:08
Debian Security Bug Tracker
security-tracker.debian.org
24
ncurses
vulnerability
memory corruption
terminfo
environment variable
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ncurses | < 6.4-3 | ncurses_6.4-3_all.deb |
| Debian | 11 | all | ncurses | < 6.2+20201114-2+deb11u2 | ncurses_6.2+20201114-2+deb11u2_all.deb |
| Debian | 10 | all | ncurses | < 6.1+20181013-2+deb10u5 | ncurses_6.1+20181013-2+deb10u5_all.deb |
| Debian | 999 | all | ncurses | < 6.4-3 | ncurses_6.4-3_all.deb |
| Debian | 13 | all | ncurses | < 6.4-3 | ncurses_6.4-3_all.deb |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-2733)
2023-09-11 00:00:00
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-2564)
2023-08-03 00:00:00
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-2764)
2023-09-11 00:00:00
nessus
nessus
EulerOS Virtualization 2.11.1 : ncurses (EulerOS-SA-2023-2733)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : ncurses (EulerOS-SA-2023-2362)
2023-07-18 00:00:00
Amazon Linux 2 : ncurses (ALAS-2023-2096)
2023-07-01 00:00:00
amazon
amazon
Important: ncurses
2023-06-21 19:11:00
Important: ncurses
2023-07-05 21:44:00
broadcom
broadcom
oraclelinux
oraclelinux
ncurses security and bug fix update
2023-11-11 00:00:00
ncurses security update
2023-09-20 00:00:00
nvd
nvd
CVE-2023-29491
2023-04-14 01:15:08
osv
osv
Moderate: ncurses security and bug fix update
2023-11-07 00:00:00
CVE-2023-29491
2023-04-14 01:15:08
Moderate: ncurses security update
2023-09-19 00:00:00
mageia
mageia
Updated ncurses packages fix security vulnerability
2024-03-16 01:51:55
cbl_mariner
cbl_mariner
CVE-2023-29491 affecting package ncurses 6.3-2
2023-05-25 17:55:45
CVE-2023-29491 affecting package ncurses for versions less than 6.4-1
2023-05-25 09:38:10
redos
redos
ROS-20240404-14
2024-04-04 00:00:00
cve
cve
CVE-2023-29491
2023-04-14 01:15:08
thn
thn
ubuntucve
ubuntucve
redhatcve
redhatcve
CVE-2023-29491
2023-04-28 20:51:32
redhat
redhat
(RHSA-2023:6698) Moderate: ncurses security and bug fix update
2023-11-07 06:12:11
(RHSA-2023:5249) Moderate: ncurses security update
2023-09-19 12:37:09
(RHSA-2023:7361) Moderate: ncurses security update
2023-11-21 08:12:16
ibm
ibm
almalinux
almalinux
Moderate: ncurses security update
2023-09-19 00:00:00
Moderate: ncurses security and bug fix update
2023-11-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-04-24 05:19:24
alpinelinux
alpinelinux
CVE-2023-29491
2023-04-14 01:15:08
prion
prion
Memory corruption
2023-04-14 01:15:00
cvelist
cvelist
CVE-2023-29491
2023-04-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0024
2023-06-13 00:00:00
debian
debian
[SECURITY] [DLA 3682-1] ncurses security update
2023-12-03 18:46:35
fedora
fedora
[SECURITY] Fedora 38 Update: ncurses-6.4-7.20230520.fc38
2024-01-31 01:42:30
ubuntu
ubuntu
ncurses vulnerabilities
2023-05-23 00:00:00
cloudfoundry
cloudfoundry
USN-6099-1: ncurses vulnerabilities | Cloud Foundry
2023-06-05 00:00:00
mmpc
mmpc
Uncursing the ncurses: Memory corruption vulnerabilities found in library
2023-09-14 11:30:00
mssecure
mssecure
Uncursing the ncurses: Memory corruption vulnerabilities found in library
2023-09-14 11:30:00
apple
apple
About the security content of macOS Big Sur 11.7.9
2023-07-24 00:00:00
About the security content of macOS Monterey 12.6.8
2023-07-24 00:00:00
About the security content of macOS Ventura 13.5
2023-07-24 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2023-29491